This is why we need multi-factor authentication (backup social recovery, passkeys, trusted device share, etc)